CVE Intelligence

Vulnerabilidades do Westerndeal GSheetConnector For Ninja Forms

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Westerndeal GSheetConnector For Ninja Forms: 1 registro(s), com versões afetadas e correções.

CVE-2025-13136 Média · 4.3 CWE-862 22/11/2025
GSheetConnector For Ninja Forms <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) System Information Exposure
The GSheetConnector For Ninja Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'njform-google-sheet-config ' page in all versions up to, and including, 2.0.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve information about the system.